Comment by Juliate

Totally.

Risk = (probability of it happening) x (cost when it happens)

That a man/administration decides to cut off, or take hostage, or tax, online services because they are hosted on their premises, but benefits to/operates for "once good friends but now very unfriendly, bad, incompetent, the worst people", this is definitely not a law of nature.

But, that he/they decide to trigger absurd actions with long-lasting damaging consequences, while not a law of nature, that happened more often than not in the past 12 months than in the whole century before. Or, granted, maybe not "absurd", but definitely "not in line with a century of rather predictable behaviour".

So... you'd be rational to consider that the risk has moved from "low" to "med high" or "high" category in a lot of areas you do not control.

If the customer disagrees, fine: their business, not mine. My duty stops at notifying and documenting the risk.